Use of Cache Containing Sensitive Information

Overview next is a react framework. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in createPatchedFetcher in packages/next/src/server/lib/patch-fetch.ts. An attacker can leak a cached response body from one request to another by sending...

CVE-2025-49178 affecting package xorg-x11-server for versions less than 1.20.10-16

CVE-2025-49178 affecting package xorg-x11-server for versions less than 1.20.10-16. A patched version of the package is available...

CVE-2025-49180 affecting package xorg-x11-server for versions less than 1.20.10-16

CVE-2025-49180 affecting package xorg-x11-server for versions less than 1.20.10-16. A patched version of the package is available...

CVE-2025-49176 affecting package xorg-x11-server for versions less than 1.20.10-16

CVE-2025-49176 affecting package xorg-x11-server for versions less than 1.20.10-16. A patched version of the package is available...

CVE-2025-26601 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26601 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

CVE-2025-26600 affecting package xorg-x11-server for versions less than 1.20.10-15

CVE-2025-26600 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...

Security update for rsync

This update for rsync fixes the following issues: Bump rsync protocol version to 32 to show server is patched against recent vulnerabilities. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you c...

PT-2025-5680 · Rsync · Rsync

Name of the Vulnerable Software and Affected Versions: rsync affected versions not specified Description: The issue concerns recent vulnerabilities in rsync. An update bumps the rsync protocol version to 32, indicating that the server is patched against these vulnerabilities. Recommendations: At...

CVE-2023-42818 SSH public key login without private key challenge if mfa is enabled in jumpserver

JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...

eng.dycasting.com Cross Site Scripting vulnerability OBB-1405054

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...